PT-2025-10623

CVE-2024-54558

Published

2024-09-16

Updated

2025-03-27

Description by

CVSS 2.0

3.2

Low

MetricsAV:L/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 macOS Sequoia versions prior to 15

Description A clickjacking issue was addressed with improved out-of-process view handling. This issue may allow an app to trick a user into granting access to photos from the user's photo library.

Recommendations For iOS versions prior to 18, update to iOS 18 or later. For iPadOS versions prior to 18, update to iPadOS 18 or later. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 or later.

Exploitability

Fix

Impacts

Researchers

Ron Masas

Vendors

Affected products

Weakness enumeration

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2024-54558